$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa File: ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa (raw, json) Hash identifier: FJBGYDIJWq5W1JZ03tFyWvWEGVwyVMFJc9psv2Frl98= Subject key identifier: 7D:94:62:28:64:A1:BC:18:B8:53:C7:9D:F3:1B:4B:01:0D:F8:8F:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81B26BFBC3BC60153EB700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.223.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b2:6b:fb:c3:bc:60:15:3e:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=bc751c91-816f-4528-a200-518e86294e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:91:3c:42:42:03:ef:c4:c3:5b:7b:26:04: 77:53:9d:c1:e6:3d:3f:2c:b7:a3:12:47:dc:8a:f9: 94:05:77:d5:79:07:f9:12:3a:2f:28:72:40:8e:82: ce:f7:4f:bb:5d:a4:cd:e1:8b:bb:49:94:f3:42:f6: 49:c2:32:89:c4:92:46:7e:cd:2d:76:51:c5:42:16: c5:d6:0f:d3:f8:dd:3b:4a:87:57:ab:6f:36:49:db: e7:47:6b:b3:c2:cd:83:8f:64:27:05:c9:4a:0b:17: 59:9a:df:5d:c8:68:37:dd:0a:6f:80:d8:02:61:9f: ef:96:32:22:93:a9:ff:56:d3:8d:82:6e:94:57:36: ec:5b:c6:79:80:10:50:78:95:2d:61:8e:2f:fc:46: 53:ae:fd:82:ef:91:63:78:2c:42:26:4f:9f:21:2b: b9:5e:fc:15:63:89:1b:ed:25:26:51:47:d9:5c:81: 4d:8d:ce:b1:1c:58:aa:cf:6b:cc:b3:ac:74:02:01: 81:32:7e:ff:bb:cb:b4:93:ba:4a:9a:f9:ad:2d:94: 35:d9:6b:57:b7:d2:05:f1:2e:aa:b4:34:f4:6d:69: 30:a2:94:6a:18:56:ab:0e:26:e1:7e:3f:22:8b:c3: 89:0c:52:78:a4:ae:70:14:a6:69:c6:7b:75:ca:d5: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:94:62:28:64:A1:BC:18:B8:53:C7:9D:F3:1B:4B:01:0D:F8:8F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff4a1e5a-a13f-3a48-b8e3-d629815153bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:b1:2a:f9:20:4b:07:74:d4:85:ab:06:e7:c7:ca:d2:52: a1:86:8e:ef:e9:4b:55:ea:5a:ca:1c:56:2a:d5:b1:e1:02:07: 09:97:e8:66:26:d4:f7:8e:b0:96:c1:15:69:27:bd:fc:ca:75: da:f7:ca:30:05:7e:d6:70:f2:32:b6:17:bf:7d:05:37:b4:5a: 0a:6a:8c:b0:60:5a:f6:ad:58:2b:de:bf:52:23:c5:b0:b1:7d: 7b:c0:b9:fb:8f:1f:44:fd:a2:9a:58:26:df:9c:f9:d3:ec:88: 20:cc:4a:f3:eb:c7:dc:55:cf:5a:26:99:7c:75:bc:48:9f:1c: f9:ea:0e:f1:be:99:1b:d8:3c:b2:c1:39:ee:a2:d4:03:34:bc: d2:ff:b7:9f:1b:d7:54:c8:23:6e:71:44:95:10:8c:74:34:48: e1:e1:00:ca:d0:0a:49:1b:7f:a1:28:7e:15:9d:07:1e:78:08: 3b:70:8f:1c:dc:13:f6:a5:42:68:e9:22:b8:cb:ed:5f:48:12: 29:8c:b3:60:9b:ab:d8:0b:c9:01:75:29:80:1f:54:ad:16:a8: 49:ba:28:d1:d9:f3:13:6f:5d:4a:9a:e0:e0:7a:dd:5e:85:d8: 2c:35:ba:c6:64:61:a7:81:df:bf:c6:8b:ae:6d:84:b6:df:13: 24:ba:2c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbJr+8O8YBU+twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YmM3NTFjOTEtODE2Zi00NTI4LWEyMDAtNTE4ZTg2Mjk0ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8yRPEJCA+/Ew1t7JgR3U53B5j0/LLejEkfc ivmUBXfVeQf5EjovKHJAjoLO90+7XaTN4Yu7SZTzQvZJwjKJxJJGfs0tdlHFQhbF 1g/T+N07SodXq282SdvnR2uzws2Dj2QnBclKCxdZmt9dyGg33QpvgNgCYZ/vljIi k6n/VtONgm6UVzbsW8Z5gBBQeJUtYY4v/EZTrv2C75FjeCxCJk+fISu5XvwVY4kb 7SUmUUfZXIFNjc6xHFiqz2vMs6x0AgGBMn7/u8u0k7pKmvmtLZQ12WtXt9IF8S6q tDT0bWkwopRqGFarDibhfj8ii8OJDFJ4pK5wFKZpxnt1ytWtQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2UYihkobwYuFPHnfMbSwEN+I+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY0YTFlNWEtYTEzZi0z YTQ4LWI4ZTMtZDYyOTgxNTE1M2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDsSr5IEsHdNSFqwbnx8rSUqGGju/pS1XqWsocVirVseECBwmX6GYm 1PeOsJbBFWknvfzKddr3yjAFftZw8jK2F799BTe0WgpqjLBgWvatWCvev1IjxbCx fXvAufuPH0T9oppYJt+c+dPsiCDMSvPrx9xVz1ommXx1vEifHPnqDvG+mRvYPLLB Oe6i1AM0vNL/t58b11TII25xRJUQjHQ0SOHhAMrQCkkbf6EofhWdBx54CDtwjxzc E/alQmjpIrjL7V9IEimMs2Cbq9gLyQF1KYAfVK0WqEm6KNHZ8xNvXUqa4OB63V6F 2Cw1usZkYaeB37/Gi65thLbfEyS6LOU= -----END CERTIFICATE-----Generated at Fri Sep 4 22:21:25 2026 by rpki-client